Last updated: 16 January 2023
The Privacy Policy describes the policies and procedures followed by Girls Are Investors UK and its affiliates (“GAIN”, “we”, “our” or “us”) regarding the collection, use and disclosure of your personal data when you visit www.gainuk.org (the “Website”), our participating firm registration page, our candidate portal or otherwise interact with us. For the purposes of UK/EU data protection laws, GAIN is the controller of your personal data.
Please read this Privacy Policy carefully in order to understand our views and practices regarding your personal data and how we will treat it. Please note that when using the Website, this Privacy Policy should be read in conjunction with our Terms and Conditions.
Collection of Personal Data. When you visit our Website, our participating firm registration page, our candidate portal, receive services from us or otherwise interact with us, we may collect the following personal data about you:
Information that you give to us when accessing the Website – you may give us personal data including your name, contact details including physical address, telephone number(s), personal or business email address when you contact us (using the online contact form or by emailing us), sign up to our newsletter or register to attend an event.
Information that you give to us when you apply to one of our programmes via our candidate portal – you may give us personal data including your name, gender, ethnicity, citizenship; passport, work permit, visa, or other immigration documentation; contact details (personal, business or educational institution email address, telephone numbers, physical address); resume, including relevant skills, experience and educational background; social media profiles; any other personal data that you may provide to us through the application process, such as views and preferences that you disclose to us in interviews, your responses to questions, and demonstration of your skills.
Information that you give to us when you register to sponsor an intern as a participating firm – as a representative of the firm, we may collect your name, company, position; contact details (personal, business or educational institution email address, telephone numbers, physical address); and any other personal data that you may provide to us through the application process, such as views and preferences that you disclose to us in the registration form and your responses to questions.
Automatically Collected Data – we automatically collect basic technical information from all visitors to the Website through our automatic data collection tools, which may include cookies and other commonly used technologies (see section on Cookies below). These tools collect certain standard information that your browser sends to the Website such as your browser type and language, access times, and the address of the site from which you came to the Website. They may also collect information about your Internet Protocol (“IP”) address (from which we can discern the country you are connecting from at the time you visit the Website), or click stream data within our Website (i.e. the actions taken in connection with the website). Where the information that we collect automatically on the Website is personal data, our legal basis for the use of this information is that it is necessary for the purposes of our legitimate interests in improving the functionality of our Website by learning how Website visitors interact with the Website and maintaining the safe operation of our Website.
Use of your Personal Data. We may use the personal data you give us to carry out the following purposes:
Purpose
Lawful Basis
To contact you and to respond to your requests and enquiries when you contact us, or submit an Interest Form (either by becoming a sponsor or becoming an ambassador)
We have a legitimate interest to respond to your requests and enquiries for ongoing business administration
To send you our newsletter
Where we have received your consent
For business administration, including statistical analysis
We have a legitimate interest to properly manage and administer our relationship with you and to ensure that we are effective and efficient
To personalise your visit to the website and to assist you while you use the website
We have a legitimate interest to properly manage and administer our relationship with you and to ensure that we are effective and efficient
To improve the website by helping us understand who uses the website
We have a legitimate interest to properly manage and administer our relationship with you and to ensure that we are effective and efficient
For fraud prevention and detection and to comply with applicable laws, regulations or codes of practice
To comply with our legal obligations
To offer or provide recruitment services, share that information with participating firms and assess candidate’s skills for upcoming internships
For performance of contract and/or legitimate interests
To verify information when a participating firm wishes to view a profile in more detail
For performance of contract and/or legitimate interests
To comply with anti-money laundering regulations concerning screening
To comply with our legal obligations
To verify a candidate’s right to work in the relevant country they are applying to
To comply with our legal obligations
To identify and evaluate a candidate’s skills for the purposes of selecting suitable roles
For performance of contract and/or legitimate interests
To verify a representative’s position at a participating firm and check the firm against public available sources
For our legitimate interests
To maintain records in relation to recruiting and hiring
For our legitimate interests
For the purposes of reviewing and maintaining equal opportunity monitoring
To comply with our legal obligations; for our legitimate interests and for reasons of substantial public interest
For the purposes of verifying a student's eligability for the GAIN Bursery
For our legitimate interests
You have a right to object to processing of your personal data where that processing is carried out for our legitimate interest.
Sharing your Personal Data. When using the Website – we may use selected third parties to provide us with services or technical support for the Website who may have access to your personal data. For the purposes described above, we engage providers of website analytics, hosting and cloud computing services and other IT services, payroll services, auditing services, consultancy services, regulatory services, legal services, event software providers, background checks, talent management and recruitment services, in addition to other administrative services. All service providers are permitted to use data only for the purpose of performing services on our behalf. We may also share limited personal data with co-hosts of events we host or otherwise sponsor (such as your name and university or employer) in order to administer the event and provide a list of attendees and with booking companies (such as your name and email address) in order to fulfil your registration request. Similarly, we may disclose your personal data as required by law to protect our rights and property, or the rights, property or safety of others, including to advisers, law enforcement agencies, judicial and regulatory authorities.
When you apply to the Investment Internship Programme via our candidate portal – we may share your information with participating firms to increase your chances of securing an internship.
Information that you give to us when you register to sponsor an intern as a participating firm– we may share your data with candidates to ensure that we can provide you with a suitable pool of candidates.
International Transfer. When you are based in the European Economic Area (“EEA”) or the UK, personal data collected from you, including via the Website will be stored in the UK only. The UK has been recognised by the European Commission as providing adequate protection under data protection laws in the EEA and therefore we do not need to implement any additional safeguards to govern transfers of personal data from the EEA to the UK.
Security. The security of your personal data is important to us. We take reasonable steps, consistent with generally accepted industry standards, including technical, administrative and physical safeguards to protect the personal data submitted to us from loss, misuse and unauthorised access, disclosure, alteration and destruction. However, no method of security or transmission over the Internet is entirely secure. You should always use caution when transmitting personal data over the Internet.
Retention. We may retain the information relating to you as necessary for the provision of the services, internal analytical purposes, or to comply with its legal obligations, resolve disputes and enforce agreements (e.g. settlement). The criteria used to determine the retention periods include: (i) how long the personal data is needed to provide the services and operate the business and whether we can achieve those purposes through other means; (ii) the amount, nature and sensitivity of personal data collected; (iii) the potential risk of harm from unauthorised use or disclosure of your personal data; and (iv) whether we are subject to a legal, contractual or similar obligation to retain the data (e.g., mandatory data retention laws, government orders to preserve data relevant to an investigation, or data that must be retained for the purposes of litigation or disputes).
Rights of Individuals. Subject to the applicable provision of applicable data protection laws, you have the following rights with respect to your personal data: the right to: (i) request access to and rectification and erasure of your personal data; (ii) obtain restriction of processing or to object to processing of your personal data; (iii) the right to withdraw your consent at any time (the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal) and (iv) ask for a copy of your personal data to be provided to you, or a third party, in a digital format. You also have the right to lodge a complaint about the processing of your personal data with your local data protection authority (in the United Kingdom, the Information Commissioner’s Office (ICO) at https://ico.org.uk/concerns). If you would like to exercise any of these rights, please feel free to contact info@gainuk.org.
Failure to provide the personal data we request. When we need your personal data to comply with legal obligations or to perform our contract, failure to provide this data may impact our ability to provide our services.
Cookies. Our Website uses “cookies,” which may automatically collect certain information and data. Please see our Cookies Policy for further details.
Marketing. Where you have requested it, we may contact you by e-mail to provide information regarding events, products, services and content that may be of interest to you via our newsletter, unless you advise us that you do not wish to receive marketing communications from us. If applicable law requires that we receive your consent before we send you certain types of marketing communications, we will only send you those types of communications after receiving your consent. If you wish to stop receiving marketing communications from us, or would like to stop processing your personal data in any other way, you can contact us as described below to let us know what types of communications you wish to stop receiving.
Generative artificial intelligence (“Generative AI”). Generative artificial intelligence (“Generative AI”) is used by GIRLS ARE INVESTORS UK to analyse applications to our programmes. GIRLS ARE INVESTORS UK inputs a section of an application or response into a Generative AI system to establish the originality of the content and/or detect the use of Generative AI to create the content. While personal data is not intentionally inputted into the Generative AI system, the inadvertent inclusion of personal data may occur.
Revisions to this Privacy Policy. We may revise or supplement this Policy from time to time. If we make any substantial changes in the way we use or share your personal data, we will notify you by posting a notice on our Website, prior to the change becoming effective. We encourage you to refer to this Policy on an ongoing basis so you understand our current privacy practices.
External Links. The Website may, from time to time, contain links to external sites operated by third parties. We are not responsible for these third party sites or the content of such third party sites. Once you have left the Website, we cannot be responsible for the protection and privacy of any information which you provide. You should exercise caution and look at the privacy statement for the Website you visit.
Contact Us. If you have any questions or comments about our Privacy Policy, or if you wish to exercise your rights as described above, please feel free to contact us at 85 Great Portland Street, 1st Floor, London, W1W 7LT or on info@gainuk.org.